SmartRAT ClickFix Campaign Identified

**Executive summary:** Threat actors are using AI-generated typosquatting websites and fake system/browser error screens to coerce Brazilian banking customers into pasting a malicious PowerShell command that installs SmartRAT (Banana RAT); the malware runs in-memory, escalates privileges, establishes persistent System-level services, communicates with encrypted TCP C2, and can capture credentials, screen streams, keylogs, and QR codes to facilitate financial fraud — defenders should block squatted domains, monitor unusual PowerShell activity and scheduled tasks, and enforce application control.